Is Cisco Web Communicator safe?
Cisco Web Communicator bridges any web page to the Cisco Jabber native host using only the extension's public ID as a gate.
The extension's content script registers a postMessage listener on all HTTP/HTTPS pages that accepts commands from any page that knows the extension ID — a value that is stable and publicly known for published extensions. Accepted messages are relayed verbatim to the com.cisco.jabber.jsdk native host, which exposes telephony and collaboration operations including encrypted password handling. Additionally, the manifest's externally_connectable field grants every installed Chrome extension (not just Cisco's) the ability to open a port and send commands to the same native host without further sender validation.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes itcisco.chromestore - 2 other listings from the same operator, none carrying a finding
cisco.chromestore - 2 other listings from the same operator, none carrying a finding
What this publisher told the store about itself, and the other listings that told it the same thing.
Same store account
2 other listings published from this account, 22.0M+ users between them, none of them carrying a finding.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 11.8.4.1. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Talk to a program installed on your computer, outside the browser's sandbox
nativeMessaging
See, disable and uninstall your other extensions, including your security ones
management
Where it sends data
Destinations our analysis observed Cisco Web Communicator contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- com.cisco.jabber.jsdk
Cisco Web Communicator sends data to com.cisco.jabber.jsdk. No other extension we have analysed sends data here.